Binance Restores ZEC, TON and SUI Withdrawals as FBI Blames North Korea for $6 Billion Hack

Binance has reopened withdrawals for Zcash (ZEC), Toncoin-network assets and SUI, the latest phased step in its recovery from the October 29 hack that saw more than $6 billion in crypto stolen. The exchange confirmed the update in a post on X, saying company reserves and its Secure Asset Fund for Users (SAFU) are covering lost balances while more withdrawal rails return in stages.

The restored rails are specific. ZEC withdrawals run on the Zcash network. USDT and GRAM are available on TON. SUI withdrawals operate on the Sui network. Solana and Polygon exits had already restarted before this wave.

Which networks are back so far?

Earlier restoration phases covered Bitcoin, Ethereum, BNB, XRP and Dogecoin, along with Base, Optimism and Arbitrum. A separate Binance note on X added Tron, Solana, Polygon and Avalanche C-Chain to the list of live rails.

Not everything is open yet. Binance said the remaining assets and networks will return only after security checks are complete. Deposits stayed available throughout the freeze. Users may still hit delays while withdrawal queues clear, and the exchange told customers to follow its official channels for further updates.

What did the FBI say about the attackers?

U.S. agencies have joined the case. The FBI attributed the theft of more than $6 billion in crypto to North Korean hackers tracked as TraderTraitor, and said it had identified unusual movement of the stolen coins.

The FBI worked the trail with the U.S. Secret Service and IRS Criminal Investigation. Agents said the attackers converted a large share of the loot into Ether and expect further laundering through DeFi protocols and instant swap tools. Officials called on THORNode operators and other firms to halt transactions tied to the stolen funds — an operational request that puts on-chain infrastructure providers directly in the enforcement loop.

The attribution lands while Binance is still rebuilding its withdrawal infrastructure in stages after the multi-billion-dollar breach, meaning the criminal case and the exchange's recovery are now running on parallel tracks.

How much of the loss has Binance covered?

Binance said it has settled roughly 95% of the $6.3 billion lost. Company reserves and SAFU, Binance's emergency fund for security events, back that recovery effort. The exchange is still vetting each network before it re-enables additional withdrawal channels, a process with no stated completion date.

For users, the practical picture is mixed: major assets are moving again, deposits never closed, and balances are being made whole from Binance's own pockets. But the tail of the restoration — smaller networks and less liquid assets — depends on security reviews that Binance controls and times itself.

The FBI's request to THORNode operators and other firms suggests the next phase of this story plays out on-chain, where investigators will be watching for laundering attempts through DeFi and swap services as the remaining 5% of affected funds gets settled.